@brainervirus/workit-codex 8.19.0 → 8.19.2

package/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "workit",
-  "version": "8.19.0",
+  "version": "8.19.2",
   "description": "Adaptive engineering workflow rails for Codex",
   "author": {
     "name": "BrainerVirus"

package/dist/{workit-hook-rkwtxnyc.js → workit-hook-00hstm40.js}

@@ -7,7 +7,7 @@ import {
   gateCheckNames,
   checkCommand,
   maybeHeavy
-} from "./workit-hook-8yfjygc1.js";
+} from "./workit-hook-kg4dxyfv.js";
 // packages/workit-core/src/hooks/descriptor.ts
 var support = (descriptor, axis) => {
   if (axis.startsWith("event:"))
@@ -21227,7 +21227,7 @@ var canonical2 = (file) => {
   let rest = "";
   for (let dir = path24.resolve(file);; dir = path24.dirname(dir)) {
     try {
-      return path24.join(realpathSync5(dir), rest);
+      return path24.join(realpathSync5.native(dir), rest);
     } catch {
       if (path24.dirname(dir) === dir)
         return path24.resolve(file);
@@ -21447,18 +21447,26 @@ var CD2 = new Set(["cd", "chdir", "set-location", "sl"]);
 var PUSHD2 = new Set(["pushd", "push-location"]);
 var POPD2 = new Set(["popd", "pop-location"]);
 var cdInto = (dir, words) => {
-  const target = words.slice(1).find((word) => !word.startsWith("-") || word === "-");
+  const named = words.slice(1).find((word) => !word.startsWith("-") || word === "-");
+  const target = named === undefined ? undefined : homeExpanded(named);
   if (dir === undefined || target === "-" || target && /^~|[$`*?]/.test(target))
     return;
   return target === undefined ? os9.homedir() : path24.resolve(dir, target);
 };
 var quoteWord2 = (word) => /^[\w@%+=:,./-]+$/.test(word) ? word : `'${word.replaceAll("'", "'\\''")}'`;
+var homeExpanded = (file) => {
+  const match = /^(?:~|\$HOME|\$\{HOME\})(?=\/|$)/.exec(file);
+  return match ? (process.env.HOME || os9.homedir()) + file.slice(match[0].length) : file;
+};
 var segmentTargets = (cwd, command, dialect, depth = 0) => {
   const targets = [];
   let dir = cwd;
   let stack = [];
   const groups = [];
-  const at = (file) => path24.isAbsolute(file) ? file : dir === undefined ? null : path24.resolve(dir, file);
+  const at = (file) => {
+    const home = homeExpanded(file);
+    return path24.isAbsolute(home) ? home : dir === undefined ? null : path24.resolve(dir, home);
+  };
   for (const segment of segmentsOf(command, dialect)) {
     if (segment.group === "open") {
       groups.push({ dir, stack: [...stack] });
@@ -21563,7 +21571,39 @@ var claimAll = (owner, targets, deps) => {
     claimLiveSession(target, owner, deps);
 };
 var liveTargets = (cwd, paths) => paths?.length ? paths.map((file) => path24.resolve(cwd, file)) : [path24.join(cwd, DIR_TARGET)];
+var issuedTarget = (cwd, targets) => {
+  const state = resolveStateDir();
+  const found = targets.find((target) => underIssued(state, cwd, homeExpanded(target), process.platform, canonical2));
+  return found ?? null;
+};
+var underIssued = (state, cwd, target, platform = process.platform, real = (file) => file) => {
+  const win = platform === "win32";
+  const p = win ? path24.win32 : path24.posix;
+  const fold = (value) => win || platform === "darwin" ? value.toLowerCase() : value;
+  const named = win ? target.replace(/^\/([a-zA-Z])(?=\/|$)/, "$1:") : target;
+  const relative = p.relative(fold(real(p.resolve(state))), fold(real(p.resolve(cwd, named))));
+  if (relative.startsWith("..") || p.isAbsolute(relative))
+    return false;
+  return relative.split(p.sep)[0].startsWith("issued");
+};
+var unquotedWindowsIssued = (command) => {
+  if (process.platform !== "win32" || !command.includes("\\"))
+    return false;
+  const flat = (value) => value.replaceAll("\\", "/").toLowerCase();
+  return flat(command).includes(`${flat(resolveStateDir())}/issued`) && shellWrites(command).writes;
+};
+var issuedDeny = (file) => {
+  const unblock = "Issued ids and tokens are written only by Workit's SubagentStart hook. Run the verifier or reviewer agent so the host issues its own session; never edit the issued registries by hand.";
+  return {
+    kind: "deny",
+    reason: `workit issued-registry guard: ${file} is under Workit's issued-session state. ${unblock}`,
+    unblock
+  };
+};
 function writeGate(cwd, paths, owner, deps) {
+  const forged = paths?.length ? issuedTarget(cwd, paths) : null;
+  if (forged)
+    return issuedDeny(forged);
   if (!owner)
     return beforeWriteGate(cwd, paths);
   const targets = liveTargets(cwd, paths);
@@ -21576,6 +21616,11 @@ function writeGate(cwd, paths, owner, deps) {
   return decision;
 }
 function shellGate(cwd, command, owner, dialect = "posix", deps) {
+  try {
+    const forged = issuedTarget(cwd, segmentTargets(cwd, command, dialect)) ?? (unquotedWindowsIssued(command) ? "the issued registry" : null);
+    if (forged)
+      return issuedDeny(forged);
+  } catch {}
   const writes = shellWrites(command);
   let targets = [];
   if (owner) {

package/dist/{workit-hook-8yfjygc1.js → workit-hook-kg4dxyfv.js}

@@ -290,4 +290,4 @@ function maybeHeavy(command, cwd, env = process.env) {
   }
 }
 
-export { CHECKS_FILE, repoHeavyCommands, loadCheckConfig, matchesNamedCheck, gateCheckNames, checkCommand, maybeHeavy };
+export { CHECKS_FILE, repoHeavyCommands, loadCheckConfig, matchesNamedCheck, gateCheckNames, checkCommand, stateDir, maybeHeavy };

package/dist/workit-hook.js

@@ -1,7 +1,8 @@
 #!/usr/bin/env node
 import {
+  stateDir,
   maybeHeavy
-} from "./workit-hook-8yfjygc1.js";
+} from "./workit-hook-kg4dxyfv.js";
 
 // packages/workit-codex/hooks/launcher.ts
 var payload = "";
@@ -9,6 +10,10 @@ for await (const chunk of process.stdin)
   payload += String(chunk);
 var SHELL_TOOLS = new Set(["bash", "unified-exec"]);
 var WRITE_TOOLS = new Set(["applypatch", "edit", "write"]);
+var mentionsIssued = (text) => {
+  const flat = (value) => value.replaceAll("\\", "/").toLowerCase();
+  return /issued/i.test(text) || flat(text).includes(flat(stateDir(process.env)));
+};
 var quietEvent = () => {
   try {
     const value = JSON.parse(payload);
@@ -29,7 +34,7 @@ var quietEvent = () => {
       return null;
     if (event === "PostToolUse")
       return /\bcommit\b/.test(text) ? null : event;
-    return /\b(?:git|gh|glab)\b/.test(text) || maybeHeavy(text, value.cwd) ? null : event;
+    return /\b(?:git|gh|glab)\b/.test(text) || mentionsIssued(text) || maybeHeavy(text, value.cwd) ? null : event;
   } catch {
     return null;
   }
@@ -39,6 +44,6 @@ if (quiet)
   process.stdout.write(`${JSON.stringify({ hookSpecificOutput: { hookEventName: quiet } })}
 `);
 else {
-  const { runCodexHook } = await import("./workit-hook-rkwtxnyc.js");
+  const { runCodexHook } = await import("./workit-hook-00hstm40.js");
   await runCodexHook([payload]);
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@brainervirus/workit-codex",
-  "version": "8.19.0",
+  "version": "8.19.2",
   "private": false,
   "description": "Workit Codex CLI/desktop plugin — shared MCP transport, hooks, method skills, and verifier/reviewer/implementer agents",
   "keywords": [
@@ -39,8 +39,8 @@
     "build": "bun scripts/build.ts"
   },
   "devDependencies": {
-    "@brainervirus/workit-core": "^8.19.0",
-    "@brainervirus/workit-mcp": "^8.19.0"
+    "@brainervirus/workit-core": "^8.19.2",
+    "@brainervirus/workit-mcp": "^8.19.2"
   },
   "engines": {
     "node": ">=24"

package/skills/workit-implement/SKILL.md

@@ -24,7 +24,10 @@ description: Build a requested change in small verified steps - follow local pat
    lease waits and names its holder (`workit lock status`).
 5. Prove the feature on its real surface with the project's `verify-<app>`
    skill; none yet? Write one (read the `workit-verify-app` skill's SKILL.md and follow it). Tests show branch behavior,
-   not that the feature works.
+   not that the feature works. The report carries what you observed: a UI
+   change a screenshot or console/network check (chrome devtools or
+   agent-browser), an API a quoted real response. App not runnable? Say so
+   plainly, never claim success.
 6. Commit: `workit git commit -m "<type>: <what>" -- <paths>` (or `--all`).
    No endpoint named? Stop here and state the next command. Hand delivery to
    ship, which pushes and opens the PR with its body shape (read the `workit-ship` skill's SKILL.md and follow it), only
@@ -55,8 +58,7 @@ flag was never invoked)
 
 Good: "Added `--since`. measured: `workit check test` exit 0;
 `mytool log --since 2d` printed 3 entries against the fixture repo. inferred:
-the GitLab path behaves the same (shared parser, not run). Verification handed
-to the verifier agent."
+the GitLab path behaves the same (not run). Handed to the verifier agent."
 
 ## Check
 

package/skills/workit-verify-app/SKILL.md

@@ -27,7 +27,10 @@ way a user would.
    - **Drive:** how to exercise it: CLI invocations, `curl` against routes, a
      browser tool for UI, with fixture data.
    - **Evidence:** what to capture (exit code, response body, screenshot path)
-     and the command that records it.
+     and the command that records it. A UI is driven with chrome devtools or
+     agent-browser, with a screenshot or console/network observation; an API
+     with a real call, response quoted. The report carries the observation.
+     App not runnable? Say so plainly, never claim success.
    - **Cleanup:** stop processes, remove temp data.
    - **Feature map:** feature, how to drive it, expected observation.
 3. **Prove it end-to-end once:** launch, drive one feature, capture evidence,
@@ -54,7 +57,8 @@ report `clean`, `changed` (what) or `blocked` (why).
 Bad: "Verify by running the tests." (that is not the real surface)
 
 Good: "Launch `bun run dev` (ready: `listening on :5173`, 30 s). Drive:
-`curl -s localhost:5173/api/health` returns `{"ok":true}`. Evidence:
+`curl -s localhost:5173/api/health` returned `{"ok":true}`; screenshot of
+/settings at .workit-scratch/settings.png. Evidence:
 `workit check --name verify-web -- bun scripts/smoke.ts` exit 0."
 
 ## Check

package/skills/workit-verify-app/references/template.md

@@ -30,6 +30,8 @@ description: Launch, drive and observe <app> on its real surface (<cli|web|api>)
 ## Evidence
 `workit check --name verify-<app> -- <driver command>` records exit code and log.
 Screenshots go to `<tmp dir>/verify-<app>/<feature>.png`; cite the path.
+UI: also report a console or network observation. API: quote the real response.
+If the app cannot be run, say so plainly instead of claiming success.
 
 ## Cleanup
 `<command>` (stop servers, remove `<tmp dir>`).